Static task
static1
Behavioral task
behavioral1
Sample
aa5459d08ac41825795c88ea6083e3f60d50445e1c9e76a26c95d76ab031d249.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa5459d08ac41825795c88ea6083e3f60d50445e1c9e76a26c95d76ab031d249.exe
Resource
win10v2004-20220812-en
General
-
Target
aa5459d08ac41825795c88ea6083e3f60d50445e1c9e76a26c95d76ab031d249
-
Size
373KB
-
MD5
10ced6714d3bc2af8266fb86e0c0e030
-
SHA1
e8557c5c9c7a2836a84239872b1b0a14effef518
-
SHA256
aa5459d08ac41825795c88ea6083e3f60d50445e1c9e76a26c95d76ab031d249
-
SHA512
c9203a07f03d59e306fa32bfe7f14fe507e8f4a3d54c05a23ad0018fed93268807de6d3e86e4b4faff09eed2ed05fc973976e58e7a040e503f3c0fa235c107ac
-
SSDEEP
6144:3LmaomRtn63Lfya8vw5SaFkqdbC6MCIZwgCoaPVEmRpyWnyzJEPlth8AT:AfyaPFBu6q/CozXVzJkTh8A
Malware Config
Signatures
Files
-
aa5459d08ac41825795c88ea6083e3f60d50445e1c9e76a26c95d76ab031d249.exe windows x86
5f29695264ea2d253cc761b419a97005
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawFrameControl
InvalidateRect
OpenClipboard
BeginPaint
DestroyMenu
GetSystemMetrics
MapWindowPoints
AppendMenuW
GetActiveWindow
IsDialogMessageW
FillRect
TrackPopupMenu
ValidateRect
PostMessageW
SetWindowsHookExW
gdi32
AbortDoc
SetRectRgn
CombineRgn
EndDoc
GetDeviceCaps
SetAbortProc
dbghelp
SymUnloadModule64
SymUnDName
SymUnDName64
SymSetSearchPath
SymSetOptions
SymSetContext
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymRegisterCallback
kernel32
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
VirtualProtect
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
EnumSystemLocalesA
GetFileType
HeapSize
SetConsoleCtrlHandler
LCMapStringW
WideCharToMultiByte
LCMapStringA
ReadFile
SetEndOfFile
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetSystemInfo
IsBadReadPtr
SetErrorMode
GlobalFree
GlobalAlloc
MulDiv
GlobalUnlock
GetLocalTime
GetCurrentProcessId
GetFileTime
GetModuleFileNameW
WaitForSingleObject
LoadLibraryW
CreateProcessW
GetProcAddress
SetSystemTimeAdjustment
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoW
GetVersionExA
GetLastError
WriteFile
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
TlsAlloc
SetLastError
GetCurrentThreadId
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
SetFilePointer
SetStdHandle
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ